CVE-2026-70174
Microsoft · Published October 13, 2026
8.8
CVSS v3.1
HIGHPatch availableGet patch
Description
.NET Remote Code Execution Vulnerability. Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
Affected Products
- Microsoft Visual Studio 2026 version 18.10
- .NET 11.0 installed on Windows
- Microsoft Visual Studio 2022 version 17.14
- .NET 10.0 installed on Windows
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C